1

Topic: SSL error or anything else

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.7 MARIADB edition.
- Linux/BSD distribution name and version: Debian 9.2
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mariadb
- Web server (Apache or Nginx): apache
- Manage mail accounts with iRedAdmin-Pro? : no
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi, I try to upgrade 0.8.x to last release. I update the last oldstable debian (8) to last stable 9.2

I wanted erase all iredmail instalation , but I didn´t . Is a remote host , I don't have physical access.

I tried to access and in the webpage, showed this error:

| | Author: Aleksander Machniak | +-------------------------------------------------------------------------+ */ // include environment require_once 'program/include/iniset.php'; // init application, start session, init output class, etc. $RCMAIL = rcmail::get_instance(0, $GLOBALS['env']); // Make the whole PHP output non-cacheable (#1487797) $RCMAIL->output->nocacheing_headers(); $RCMAIL->output->common_headers(); // turn on output buffering ob_start(); // check if config files had errors if ($err_str = $RCMAIL->config->get_error()) { rcmail::raise_error(array( 'code' => 601, 'type' => 'php', 'message' => $err_str), false, true); } // check DB connections and exit on failure if ($err_str = $RCMAIL->db->is_error()) { rcmail::raise_error(array( 'code' => 603, 'type' => 'db', 'message' => $err_str), false, true); } // error steps if ($RCMAIL->action == 'error' && !empty($_GET['_code'])) { rcmail::raise_error(array('code' => hexdec($_GET['_code'])), false, true); } // check if https is required (for login) and redirect if necessary if (empty($_SESSION['user_id']) && ($force_https = $RCMAIL->config->get('force_https', false))) { // force_https can be true, , :, if (!is_bool($force_https)) { list($host, $port) = explode(':', $force_https); if (is_numeric($host) && empty($port)) { $port = $host; $host = ''; } } if (!rcube_utils::https_check($port ?: 443)) { if (empty($host)) { $host = preg_replace('/:[0-9]+$/', '', $_SERVER['HTTP_HOST']); } if ($port && $port != 443) { $host .= ':' . $port; } header('Location: https://' . $host . $_SERVER['REQUEST_URI']); exit; } } // trigger startup plugin hook $startup = $RCMAIL->plugins->exec_hook('startup', array('task' => $RCMAIL->task, 'action' => $RCMAIL->action)); $RCMAIL->set_task($startup['task']); $RCMAIL->action = $startup['action']; // try to log in if ($RCMAIL->task == 'login' && $RCMAIL->action == 'login') { $request_valid = $_SESSION['temp'] && $RCMAIL->check_request(); $pass_charset = $RCMAIL->config->get('password_charset', 'ISO-8859-1'); // purge the session in case of new login when a session already exists $RCMAIL->kill_session(); $auth = $RCMAIL->plugins->exec_hook('authenticate', array( 'host' => $RCMAIL->autoselect_host(), 'user' => trim(rcube_utils::get_input_value('_user', rcube_utils::INPUT_POST)), 'pass' => rcube_utils::get_input_value('_pass', rcube_utils::INPUT_POST, true, $pass_charset), 'valid' => $request_valid, 'cookiecheck' => true, )); // Login if ($auth['valid'] && !$auth['abort'] && $RCMAIL->login($auth['user'], $auth['pass'], $auth['host'], $auth['cookiecheck']) ) { // create new session ID, don't destroy the current session // it was destroyed already by $RCMAIL->kill_session() above $RCMAIL->session->remove('temp'); $RCMAIL->session->regenerate_id(false); // send auth cookie if necessary $RCMAIL->session->set_auth_cookie(); // log successful login $RCMAIL->log_login(); // restore original request parameters $query = array(); if ($url = rcube_utils::get_input_value('_url', rcube_utils::INPUT_POST)) { parse_str($url, $query); // prevent endless looping on login page if ($query['_task'] == 'login') { unset($query['_task']); } // prevent redirect to compose with specified ID

Help me please. Thanks

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: SSL error or anything else

Apache php module isn't working. Please try to fix it first.
Check Apache log will help a lot.

3

Re: SSL error or anything else

error.log
[Wed Oct 25 07:12:17.480742 2017] [ssl:warn] [pid 7581:tid 139806520952000] AH01906: correo.unica.edu.ve:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Oct 25 07:12:17.494343 2017] [ssl:warn] [pid 7582:tid 139806520952000] AH01906: correo.unica.edu.ve:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Oct 25 07:12:17.495885 2017] [mpm_event:notice] [pid 7582:tid 139806520952000] AH00489: Apache/2.4.25 (Debian) OpenSSL/1.0.2l mod_wsgi/4.5.11 Python/2.7 configured -- resuming normal operations
[Wed Oct 25 07:12:17.495917 2017] [core:notice] [pid 7582:tid 139806520952000] AH00094: Command line: '/usr/sbin/apache2'
[Wed Oct 25 07:12:27.170567 2017] [mpm_event:notice] [pid 7582:tid 139806520952000] AH00491: caught SIGTERM, shutting down
[Wed Oct 25 07:12:27.239531 2017] [ssl:warn] [pid 7681:tid 139734841664704] AH01906: correo.unica.edu.ve:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Oct 25 07:12:27.253016 2017] [ssl:warn] [pid 7683:tid 139734841664704] AH01906: correo.unica.edu.ve:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Oct 25 07:12:27.254719 2017] [mpm_event:notice] [pid 7683:tid 139734841664704] AH00489: Apache/2.4.25 (Debian) OpenSSL/1.0.2l mod_wsgi/4.5.11 Python/2.7 configured -- resuming normal operations
[Wed Oct 25 07:12:27.256124 2017] [core:notice] [pid 7683:tid 139734841664704] AH00094: Command line: '/usr/sbin/apache2'


apache2ctl -M
Loaded Modules:
core_module (static)
so_module (static)
watchdog_module (static)
http_module (static)
log_config_module (static)
logio_module (static)
version_module (static)
unixd_module (static)
access_compat_module (shared)
alias_module (shared)
auth_basic_module (shared)
authn_core_module (shared)
authn_file_module (shared)
authz_core_module (shared)
authz_host_module (shared)
authz_user_module (shared)
autoindex_module (shared)
cgid_module (shared)
deflate_module (shared)
dir_module (shared)
env_module (shared)
filter_module (shared)
headers_module (shared)
mime_module (shared)
mpm_event_module (shared)
negotiation_module (shared)
reqtimeout_module (shared)
setenvif_module (shared)
socache_shmcb_module (shared)
ssl_module (shared)
status_module (shared)
wsgi_module (shared)

a2query -m
negotiation (enabled by maintainer script)
authn_core (enabled by maintainer script)
filter (enabled by maintainer script)
access_compat (enabled by maintainer script)
auth_basic (enabled by maintainer script)
env (enabled by maintainer script)
alias (enabled by maintainer script)
ssl (enabled by site administrator)
mime (enabled by maintainer script)
setenvif (enabled by maintainer script)
autoindex (enabled by maintainer script)
cgid (enabled by site administrator)
authz_user (enabled by maintainer script)
dir (enabled by maintainer script)
authz_host (enabled by maintainer script)
headers (enabled by site administrator)
wsgi (enabled by maintainer script)
authz_core (enabled by maintainer script)
mpm_event (enabled by maintainer script)
socache_shmcb (enabled by site administrator)
reqtimeout (enabled by maintainer script)
deflate (enabled by maintainer script)
authn_file (enabled by maintainer script)
status (enabled by maintainer script)


which is missing?

ZhangHuangbin wrote:

Apache php module isn't working. Please try to fix it first.
Check Apache log will help a lot.

4

Re: SSL error or anything else

Ok I installed the php modules

apt install --reinstall php7.0-bz2 php7.0-readline php7.0-phpdbg php7.0-opcache php7.0-mysql php7.0-mcrypt php7.0-mbstring php7.0-json php7.0-intl libapache2-mod-php7.0 php7.0-gd  php7.0-fpm

The error now is:


DATABASE ERROR: CONNECTION FAILED!
Unable to connect to the database!
Please contact your server-administrator.

Reinstall iRedMail?

5

Re: SSL error or anything else

Any error in Roundcube log file (it's same as Postfix)?
FYI: http://www.iredmail.org/docs/file.locations.html